Institute network administrators

Network administrators and employees at the institutes can refer to this page for information on the university network (UKLAN) and connecting and managing network computers.

UKLAN network structure

UKLAN provides network access for all institutes at the University of Cologne with the exception of the Faculty of Medicine. (Provider: uk-IT Cologne Bonn).

The RRZK manages the network infrastructure and Division 5 is responsible for cable installation.

All computers are assigned IP addresses in the 134.95.x.x subnet (IPv4). Each institute has its own IP address range secured by individual firewall rules.

Network access at institutes

Only end devices such as computers, laptops and printers may be connected to UKLAN. It is explicitly forbidden to connect any networking equipment to UKLAN as this can significantly impair the operation and security of the entire university network. This applies particularly to Wi-Fi access points and home routers such as a Fritzbox. If you are uncertain about this, please contact the Networks department.

Institute network administrators can connect new computers to their institute network and register them with the RRZK. When the computer is connected to UKLAN, it will receive the network configuration automatically. For the automatic configuration to work, DHCP must be enabled (receive IP address automatically) which is a default setting on all computers.

Computers can be connected to any network socket belonging on the institute network. If the location of your institute changes, please notify the RRZK to ensure that the assignment of network sockets for your institute is updated and unauthorized access to your network is prevented.

An Example of a Socket Label:

Each network socket has a label such as ""S065-B-14/15" "SO65" is the network switch "B" is the patch panel connected to the switch 14/15 indicates the individual sockets: 14 is the left port and 15 is the right port.

In some buildings, telecommunications provided by Division 5 use the same network infrastructure as the data network. In such cases, the right port of the network socket can only be used for telephones and not for internet access. This includes the following buildings:

Richard-Strauß-Str./Aachener Str.

Aachener Str. 209

Triforum (Innere Kanalstr. 15)

Patrizia Turm (Venloer Str. 151)

Godesberger Str. 10

Weyertal 59.

Institute firewall protection

Every institute is protected by their own firewall rules. The default configuration denies all external traffic to the institute network. This is to provide protection against attacks from the internet and computers infected with viruses at other institutes within the network. If external access is required, for example to provide a service, the network administrators can request opening the firewall for this service.

Introduction to analyzing network problems

Active Directory Domain

The active directory (AD) is a directory service provided by Microsoft Windows which provides centralized user administration. It also ensures that Windows or Office updates are distributed automatically and provides centralized virus protection management (Sophos).

We recommend that computers used by students are connected to the AD so that students can log into these computers with their student account.